$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: CbRKIiLitk21wftXECZHmevYD6oqMfH0v7eKSDSOxvE= Subject key identifier: 1E:18:F1:92:3A:6A:72:B6:8E:CE:44:A0:D8:6D:91:8B:2E:5D:7D:B2 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 29AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 28B9 Signing time: Mon 02 Mar 2026 01:32:59 +0000 Manifest this update: Mon 02 Mar 2026 01:32:57 +0000 Manifest next update: Mon 09 Mar 2026 01:32:57 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: fF9OKeTQuo6p2fMTXq5KyjZmEuliRuoclTeyyRnhY5U=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: Q8fywLVcYI72bpER/jVkoIMpEUoDOPdG+CfgHKA2VuQ=) 3: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: OCIUxyS/b5tLlrfDuZU5t1QbT6abuQsHqTZkHSU5t1M=) 4: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: wKimWqituxq13t0I20mHUrve8gEvHo88MR31rc32bYY=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b0UCq+eUPG0Zw3G9HvUdvsx8LonrZenua0MeaBXzxdI=) 6: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: Vmx4U8sYtrtvs8ITU+lcZl+6PgMDKzh+1nwm+4PN1nI=) 7: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: 8c7uttYED7nsmz76eL5NChhRMk+VDx5PsMASjOCQjqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10668 (0x29ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Mar 2 01:32:57 2026 GMT Not After : Mar 9 01:32:57 2026 GMT Subject: CN=69a4e8cb-3b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:01:d9:21:78:4b:40:19:2b:9a:ee:21:9d: f6:9c:0c:d6:09:6b:92:6f:0b:45:23:59:b8:ca:ea: b6:c9:4b:49:f1:07:62:ff:1c:f8:79:03:2c:ad:be: bf:8f:68:5f:6d:70:b5:2f:f7:65:c1:30:9a:eb:bf: b4:cb:ac:dd:a0:50:bd:83:f9:f8:d3:c5:17:f6:cf: 30:ff:e4:94:78:0b:4e:00:0c:89:0e:f2:71:99:57: ec:0a:6a:08:ff:02:3d:2c:a7:de:96:7e:4e:4a:a6: d7:65:6c:33:72:b1:2e:11:c6:10:c3:3a:ef:a8:d8: 33:5f:fb:d3:67:ed:a1:cc:7a:e6:b2:f7:eb:58:31: 9d:45:e4:a5:b6:7f:a1:76:42:e0:9b:f8:84:a6:e9: 85:4c:0b:19:57:e4:eb:40:b4:bf:be:51:5c:6a:c1: 5a:6a:66:1f:f2:a6:a2:36:11:d7:4b:5d:74:15:94: 95:88:c1:3c:54:72:41:08:46:71:7c:8a:ed:f7:27: b1:9e:8b:82:d9:68:3a:47:31:b1:91:da:f0:1a:1e: 67:1f:d3:3a:4a:02:4c:57:02:dd:a1:54:d9:a4:e8: c3:25:12:10:c5:a0:94:e3:d8:df:c2:a3:f0:f6:bf: 5d:71:af:2b:4f:6d:a5:31:90:95:93:e4:fd:ac:e9: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:F1:92:3A:6A:72:B6:8E:CE:44:A0:D8:6D:91:8B:2E:5D:7D:B2 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7d:03:83:4a:ca:a5:48:df:2f:9f:a8:77:c0:75:14:68:5e: c7:76:a4:42:f9:16:dc:a4:25:e2:bb:e4:d3:6d:e3:78:0a:19: 21:2d:98:03:3c:e7:7f:7c:47:d9:47:2d:35:2d:19:53:4f:03: a8:97:07:07:db:9e:16:53:13:4a:76:c5:98:06:28:20:52:c4: 5b:50:80:f6:a0:a8:8b:e4:0a:ba:c9:44:7b:06:d9:3a:dd:a2: 0b:43:30:1c:b7:7b:78:a7:d9:08:4f:f6:de:6d:8a:17:90:33: a5:d6:33:61:1c:27:c0:80:97:81:65:96:7c:4b:ea:bd:fd:c4: fe:b6:4c:99:32:5f:2c:45:1d:1f:50:2e:b9:e6:2f:c6:12:9a: aa:5b:b5:1c:64:f4:50:6b:f9:62:4b:c4:f3:df:47:b9:69:9d: 6b:ba:6e:43:92:c9:d9:2b:f8:41:71:4d:f4:27:79:24:4c:5e: 83:3d:32:a8:29:c8:12:ae:95:cb:e2:ac:07:41:c1:a5:54:d6: 32:7a:ef:c4:cb:d6:df:5f:2b:10:dc:46:13:57:4e:62:3b:2a: 3a:74:66:7f:76:bb:bd:3b:92:f7:57:a3:1b:d9:77:43:5d:d7: 8c:8e:a9:d3:53:f0:94:3f:c1:47:4d:53:fc:e0:62:a0:1a:a5: 3b:db:18:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwMzAyMDEzMjU3WhcNMjYwMzA5MDEzMjU3WjAYMRYwFAYD VQQDEw02OWE0ZThjYi0zYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz04B2SF4S0AZK5ruIZ32nAzWCWuSbwtFI1m4yuq2yUtJ8Qdi/xz4eQMsrb6/ j2hfbXC1L/dlwTCa67+0y6zdoFC9g/n408UX9s8w/+SUeAtOAAyJDvJxmVfsCmoI /wI9LKfeln5OSqbXZWwzcrEuEcYQwzrvqNgzX/vTZ+2hzHrmsvfrWDGdReSltn+h dkLgm/iEpumFTAsZV+TrQLS/vlFcasFaamYf8qaiNhHXS110FZSViME8VHJBCEZx fIrt9yexnouC2Wg6RzGxkdrwGh5nH9M6SgJMVwLdoVTZpOjDJRIQxaCU49jfwqPw 9r9dca8rT22lMZCVk+T9rOkgMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4Y8ZI6 anK2js5EoNhtkYsuXX2yMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnn0Dg0rKpUjfL5+od8B1FGhex3akQvkW3KQl4rvk023jeAoZIS2YAzznf3xH 2UctNS0ZU08DqJcHB9ueFlMTSnbFmAYoIFLEW1CA9qCoi+QKuslEewbZOt2iC0Mw HLd7eKfZCE/23m2KF5AzpdYzYRwnwICXgWWWfEvqvf3E/rZMmTJfLEUdH1AuueYv xhKaqlu1HGT0UGv5YkvE899HuWmda7puQ5LJ2Sv4QXFN9Cd5JExegz0yqCnIEq6V y+KsB0HBpVTWMnrvxMvW318rENxGE1dOYjsqOnRmf3a7vTuS91ejG9l3Q13XjI6p 01PwlD/BR01T/OBioBqlO9sY5w== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:00 2026 by rpki-client